Certificate
$ rpki-client -vvf dev.tw/rpki/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
File: 9788ACA0CB104D300847BED012FAF8E3269E8A01.cer (raw, json)
Hash identifier: Izen2/HOXxXUPzoPbl/lSyIhGvzEkX6QD1nRnGhc+4s=
Subject key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 1F59650B2BF660FB86FD2F1C613E85E495C92A45
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Manifest: rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
caRepository: rsync://rpki.co/repo/John/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sat 12 Oct 2024 10:29:30 +0000
Certificate not after: Sat 11 Oct 2025 10:34:30 +0000
Subordinate resources: IP: 2a12:dd47:3e00::/40
IP: 2a12:dd47:df00::/44
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:59:65:0b:2b:f6:60:fb:86:fd:2f:1c:61:3e:85:e4:95:c9:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 12 10:29:30 2024 GMT
Not After : Oct 11 10:34:30 2025 GMT
Subject: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:02:af:d6:37:85:13:fc:de:f8:8f:83:8b:
73:c6:ef:a4:5e:34:ad:80:48:18:7d:c2:75:ff:62:
0a:f1:14:81:1a:33:f3:d0:4c:1a:ac:1b:46:a0:39:
d5:b6:0e:95:83:fd:b6:4d:2f:b5:b0:cf:42:35:3d:
a5:4e:2f:8f:0e:67:4f:02:7f:05:b3:ea:d0:36:d4:
aa:c2:70:66:ac:db:81:a2:1d:b1:0e:0b:c8:3e:a5:
6c:75:a5:6c:d3:12:24:f7:28:b8:85:c6:ae:ba:47:
02:00:18:5d:28:74:eb:41:dd:ac:cc:b0:db:4d:1a:
0c:c5:58:75:01:5c:cc:a6:30:c2:36:58:cc:0d:af:
07:09:85:fd:3d:a4:a8:d9:16:03:6a:90:c0:02:23:
33:c5:14:c9:b5:0a:31:72:50:fa:1b:1a:78:1d:4c:
72:64:d7:a7:10:b3:b1:35:80:4d:84:ef:f3:bb:55:
e6:a9:95:05:8b:fd:ee:d0:44:99:8a:f2:0c:f2:ce:
8f:f1:d2:0a:a3:77:32:be:1f:ff:3c:37:b1:b8:08:
e1:38:59:6b:71:b9:32:35:b7:f4:87:e2:68:8c:3a:
a2:f8:ed:76:ec:bb:6a:d3:78:bf:8f:fd:cd:4d:5e:
8c:10:f7:7e:3a:aa:2a:ed:1a:45:46:46:f6:a7:48:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/John/1/
RPKI Manifest - URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3e00::/40
2a12:dd47:df00::/44
Signature Algorithm: sha256WithRSAEncryption
e4:cf:73:2b:2a:ad:44:be:52:0a:8d:26:20:dd:c3:b4:dc:fd:
77:13:0b:a4:34:40:7d:9d:7e:73:08:5e:79:0a:47:f1:3d:55:
41:20:1f:4b:db:49:12:40:61:cc:b1:4f:97:37:e9:12:c5:87:
c2:65:28:8a:fb:f5:0c:86:47:bd:44:33:26:36:7d:5a:d2:31:
1f:8e:cb:41:ee:d0:a9:7e:2d:e0:cb:b7:3b:5a:39:91:42:d5:
3d:53:28:5c:e7:d7:e4:f4:6b:a7:10:80:59:dc:9f:09:c8:18:
c4:c2:5d:85:71:d5:05:3f:a4:bf:63:fc:86:9c:b2:6c:ea:11:
1f:8a:1b:2b:44:4a:75:13:5e:97:6d:65:53:01:3b:47:77:a1:
1b:c5:19:96:42:74:bb:86:0d:ef:a1:53:d1:99:c6:64:2a:85:
cc:ed:7d:a6:4d:68:04:bd:3f:25:ec:6b:50:71:4f:8f:f2:bc:
19:53:f0:76:34:a0:72:6a:d1:12:04:d2:85:42:8e:9f:45:7d:
59:40:6a:31:ba:36:29:59:04:bc:51:9d:98:d6:81:84:f1:9c:
ae:0c:e6:3a:93:db:79:9b:c2:ec:09:b6:82:12:75:3a:4f:d8:
7a:46:45:02:6b:40:a7:4c:8d:db:75:ec:d1:fe:79:bc:45:03:
b4:f9:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:38:58 2024 by rpki-client on console-ams.rpki-client.org